I would argue that is different because an Https server doesn’t scale as much as a user login. Also, as someone that had to rely on things like “letsencryp” free certificates for personal servers, this is so annoying to setup and I hate that security needs a third party having to give me something for free and be able to stop giving it at any moment.

I do get the point on servers, is annoying but adds security to people visiting webs. but making this also a problem on the user login side is exactly why people hate this shit, and doesn’t add any security for the users.